US20060218412A1 - Data encryption in a data storage device - Google Patents
Data encryption in a data storage device Download PDFInfo
- Publication number
- US20060218412A1 US20060218412A1 US11/086,178 US8617805A US2006218412A1 US 20060218412 A1 US20060218412 A1 US 20060218412A1 US 8617805 A US8617805 A US 8617805A US 2006218412 A1 US2006218412 A1 US 2006218412A1
- Authority
- US
- United States
- Prior art keywords
- data
- encryption
- user
- host computer
- logical block
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
- G06F21/80—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data in storage media based on magnetic or optical technology, e.g. disks with sectors
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/00094—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving measures which result in a restriction to authorised record carriers
- G11B20/0013—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving measures which result in a restriction to authorised record carriers wherein the measure concerns not the entire record carrier, but a specific physical or logical area of one or more record carriers
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/00855—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a step of exchanging information with a remote server
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
- G06F3/0601—Interfaces specially adapted for storage systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
- G06F3/0601—Interfaces specially adapted for storage systems
- G06F3/0668—Interfaces specially adapted for storage systems adopting a particular infrastructure
- G06F3/0671—In-line storage system
- G06F3/0673—Single storage device
Definitions
- the present invention relates generally to data storage devices. More particularly, the present invention relates to the encryption of data for storage in physical memory locations, which correspond to a range of logical block addresses (LBAs), in a data storage device.
- LBAs logical block addresses
- Mass storage devices are one of many components of modern computers.
- One type of mass storage device is a fixed disc drive.
- Such drives are used to store vast amounts of information relating to operating systems, applications, and user data. Some of this information is critical to the functioning of the host system in which the disc drive operates.
- the recent dramatic decrease in the cost of disc drives has resulted in them being used in many non-conventional applications, such as, audio/video applications, internet set-top boxes, gaming stations, etc. All these applications require special software to be pre-loaded onto a disc. If application software or other critical information is intentionally or unintentionally overwritten, significant losses could occur. Thus, these applications require sophisticated write protection security features. Further, schemes for prevention of unauthorized access of confidential user data are also required.
- Embodiments of the present invention provide solutions to these and other problems, and offer other advantages over the prior art.
- the present invention relates to a system for encryption of confidential user data that is implemented within a data storage device (such as a disc drive) and is substantially transparent to a host computer, thereby addressing the above-mentioned problem.
- a data storage device such as a disc drive
- a method of encrypting information in a data storage device that includes a storage medium having a plurality of physical memory locations referenced through logical block addresses.
- the method includes receiving, in the data storage device, data from a host computer. At least a portion of the received data is encrypted, within the data storage device, if the at least a portion of the received data is destined for storage in at least a subset of the plurality of physical memory locations, which correspond to a predetermined range of logical block addresses.
- the encryption of the at least a portion of the received data is substantially transparent to the host computer and independent of a file to which the at least a portion of the data belongs.
- the present invention can also be implemented as a data storage device which tangibly embodies a program of instructions executable by a controller of the data storage device to perform the above encryption method.
- FIG. 1 is an isometric view of a disc drive in which embodiments of the present invention are useful.
- FIG. 2 is a diagrammatic view of a surface of a disc employed in the disc drive of FIG. 1 .
- FIG. 3 is a block diagram showing a disc drive of the present invention coupled to a host computer.
- FIG. 4 is a flowchart of an example user authentication procedure in accordance with an embodiment of the present invention.
- FIG. 5 is a flowchart of a method embodiment of the present invention.
- FIG. 6 is a flowchart representing a method of retrieving encrypted information, which is stored in a data storage device.
- Disc drive 100 includes a housing with a base 102 and a top cover (not shown).
- Disc drive 100 further includes a disc pack 106 , which is mounted on a spindle motor 132 (shown in FIG. 3 ) by a disc clamp 108 .
- Disc pack 106 includes a plurality of individual discs, which are mounted for co-rotation about central axis 109 . In some embodiments, instead of utilizing a disc pack, a single disc 106 is employed.
- Each disc surface has an associated disc head slider 110 which is mounted to disc drive 100 for communication with the disc surface.
- Surfaces of disc 106 are usually divided into zones, with each zone including multiple adjacent tracks.
- sliders 110 are supported by suspensions 112 which are in turn attached to track accessing arms 114 of an actuator 116 .
- the actuator shown in FIG. 1 is of the type known as a rotary moving coil actuator and includes a voice coil motor (VCM), shown generally at 118 .
- Voice coil motor 118 rotates actuator 116 with its attached heads 110 about a pivot shaft 120 to position heads 110 over a desired data track along an arcuate path 122 between a disc inner diameter 124 and a disc outer diameter 126 .
- Voice coil motor 118 is driven by servo electronics, which is included in control circuitry (or controller) 130 , based on signals generated by heads 110 and a host computer 300 (shown in FIG. 3 ).
- a disc surface 200 of a typical disc (such as a disc of disc pack 106 of FIG. 1 ) is shown.
- Each disc surface includes a plurality of radially concentric tracks to aid in location and readback of data.
- Each track (such as 202 ) is further broken down into a plurality of sectors (or physical memory locations), which further aid in location of a particular unit of information.
- portion 204 represents a single sector. These sectors are addressed using a linear addressing scheme called logical block addressing (LBA).
- LBA logical block addressing
- LBA 0 corresponds to sector 1 (the first sector) of head 0 (the first head), cylinder or track 0 (the first cylinder or track), and successively proceeds along to the last physical sector on the drive which would be LBA 1,065,456.
- logical block addressing represents any linear addressing scheme.
- disc drive 100 is a component of a computer and is utilized to store vast amounts of information relating to operating systems, applications, and user data. As indicated earlier, current schemes for the prevention of unauthorized access of user data are primarily implemented in the host computer, with the disc drive having little or no control over the operation of these schemes.
- FIG. 3 is a block diagram showing disc drive 100 of the present invention coupled to a host computer 300 .
- the present invention addresses earlier-mentioned problems with the prior art by providing a system for encryption of confidential user data that is implemented within disc drive 100 and is substantially transparent to host computer 300 .
- an environment in which disc drive 100 of the present invention is useful is first described below. Thereafter, details regarding data encryption within disc drive 100 in accordance with the present invention are provided.
- disc drive 100 is coupled to host computer 300 , which is an exemplary general-purpose computing device.
- Components of computer 300 may include a processing unit 310 , a system memory 320 , and a system bus 311 that couples various system components including the system memory to the processing unit 310 .
- System bus 311 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus, and a local bus using any of a variety of bus architectures.
- a user may enter commands and information into computer 300 through input devices such as a keyboard 342 and a pointing device 341 , such as a mouse, trackball or touch pad. These and other input devices are often connected to the processing unit 310 through a user input interface 340 that is coupled to the system bus.
- a monitor 371 or other type of display device is also connected to system bus 311 via an interface, such as a video interface 370 .
- Computer 300 may operate in a networked environment using logical connections to one or more remote computers, such as a remote computer 360 on which remote application programs 365 reside.
- the logical connections depicted in FIG. 3 include a local area network (LAN) 351 and a wide area network (WAN) 353 , but may also include other networks.
- LAN local area network
- WAN wide area network
- computer 300 When used in a LAN networking environment, computer 300 is connected to LAN 351 through a network interface or adapter 350 . When used in a WAN networking environment, computer 300 typically includes a modem 352 or other means for establishing communications over WAN 353 , such as the Internet.
- computer 300 includes system memory 320 that is coupled to processing unit 310 via system bus 311 .
- System memory 320 includes computer storage media in the form of volatile and/or nonvolatile memory such as read only memory (ROM) 321 and random access memory (RAM) 322 .
- ROM read only memory
- RAM random access memory
- BIOS basic input/output system 323
- RAM 322 typically contains data and/or program modules that are immediately accessible to and/or presently being operated on by processing unit 310 .
- FIG. 3 illustrates operating system 324 , application programs 325 , other program modules 326 , and program data 327 .
- disc drive 100 is coupled to computer 300 via host-disc interface 330 .
- Computer 300 transfers data to and reads data from disc drive 100 via host-disc interface 330 .
- Host-disc interface 330 may be any type of data exchange interface for coupling a disc drive to a host computer, such as SCSI (Small Computer System Interface), UDMA (Ultra Direct Memory Access), ATA (Advance Technology Attachment), or other standards as are known in the industry or are developed in the future.
- controller 130 In disc drive 100 , data is received from, or provided to, host computer 300 with the help of controller 130 , which also implements the data encryption scheme of the present invention.
- controller 130 carries out its functions by executing instructions contained in instruction memory 133 .
- Disc drive 100 provides storage of computer readable instructions, data structures, program modules and other data for computer 300 .
- disc drive 100 is illustrated as storing operating system 134 , application programs 135 , other program modules 136 , and program data 137 . Note that these components can either be the same as or different from operating system 324 , application programs 325 , other program modules 326 , and program data 327 .
- Operating system 134 , application programs 135 , other program modules 136 , and program data 137 are given different numbers here to illustrate that, at a minimum, they are different copies.
- Operating system 134 application programs 135 , other program modules 136 , and program data 137 are stored as files, with each file being stored over a cluster of sectors (or physical memory locations) referenced through LBAs. It should be noted that the organization and structure of files is controlled by the host computer with the help of the operating system.
- a disc drive controller (such as 130 ) operates independently of the operating system and is therefore unaware of any LBA-file relationships. In other words, if the host computer (such as 300 ) sends data corresponding to a file to the disc drive (such as 100 ), the information reaches the disc controller (such as 130 ) as data to be stored in an LBA range. In response to receiving the data storage information, the controller (such as 130 ), with the help of head 110 , simply stores the data in physical memory locations that correspond to the specified contiguous LBA range.
- program instructions for LBA range encryption, decryption and other corresponding functions are stored in instruction memory 133 .
- an encryption range table that can store at least one predetermined range of LBAs, that correspond to at least a subset (less than all) of the plurality of physical memory locations, is included in non-volatile memory (on a disc surface, for example). Table 1 below is an example of such an encryption range table. TABLE 1 Encryption and User Decryption Authentication Starting LBA Ending LBA Information Information 10 15 . . . . . . . . . . . . . . . . . .
- the controller in response to receiving the data storage information, stores the data in physical memory locations that correspond to the specified LBA range. However, in accordance with the present invention, prior to storing the data in the corresponding physical memory locations, controller 130 determines whether or not the specified LBA range at least partially overlaps any predetermined LBA range(s) stored in the encryption range table. Data corresponding to any of the overlapping LBAs is encrypted by controller 130 prior to storage in the corresponding physical memory locations.
- the present invention provides a substantially host-independent and file-independent encryption scheme, which overcomes the earlier mentioned problems associated with the prior art encryption schemes. It should be noted that, usually, LBA ranges are assigned to coincide with disc partitions and therefore files are either completely encrypted or completely unencrypted. Files may not be split between partitions.
- the encryption table(s) (such as Table 1) is created at the time of disc manufacture. Records are added to the encryption table and/or modified after the disc drive (such as 100 ) is installed in the host computer (such as 300 ). Additions, deletions and updates of records in the encryption table(s) can be carried out by utilizing any suitable commands that are compatible with host-disc interface protocols, for example.
- a user authentication process is carried out to determine whether or not encryption functions for any predetermined range(s) of LBAs are enabled for a current user of the host computer (such as 300 ).
- User authentication in connection with the encryption scheme is preferably carried out at the time the user logs in to the host computer (such as 300 ).
- FIG. 4 is a flowchart 400 of an example user authentication procedure in accordance with an embodiment of the present invention.
- a user log-in process begins at step 402 .
- the user is asked to enter identification information (username and password, for example).
- the user identification information is verified.
- decryption is enabled (encrypted data in the disc drive is decrypted for the user to access) if the user identification information is found to be valid.
- the user identification information includes a decryption key.
- entry of the user identification information results in the host computer (such as 300 ) selecting an appropriate encryption/decryption key that is used to enable decryption.
- User identification information may be stored in, or tied (joined) to, the encryption range table.
- the user authentication procedure is primarily implemented in the operating system.
- the user authentication procedure is primarily implemented in BIOS or in a BIOS extension. It should be noted that no operating system changes are required when the user authentication is implemented in the BIOS or BIOS extension.
- the user authentication scheme employs security tokens, biometric scanners, etc., which enhance the security of authentication beyond more basic pass phrases.
- contents of the encryption table can be modified (records can be added, deleted and/or updated) by utilizing commands that are compatible with host-disc interface protocols.
- a user authorization process is carried out to determine a level of access 20 (no access, query only, or query and update) that a current user of the host computer (such as 300 ) has to the encryption range table(s).
- the user authorization process may be carried out in conjunction with the user authentication process using techniques similar to those described above.
- User authorization information may be stored in a hidden area of the disc drive and may be loaded into the host computer (such as 300 ) during the authorization process.
- encryption capabilities may differ for different models of disc drives.
- different encryption standards such as SHA-1 (Secure Hash Standard) based encryption methods, DES (Data Encryption Standard), AES (Advanced Encryption Standard), etc.
- the encryption keys and other information from the encryption range table are not normally accessible to the host computer.
- authentication and encryption key management is performed in disc controller 130 .
- encryption keys associated with records in the encryption table(s) may each be derived from a secret master key.
- Different ciphers algorithms used to encrypt data having different capabilities may be utilized in different embodiments of the present invention.
- encryption keys for example, 64, 128, 192 or 256 bit keys
- encryption keys may be exported from the disc drive and destroyed in the disc drive. When the encryption keys are destroyed, no disc inspection can reveal the keys. Here, an attacker needs to steal both the drive and the keys to access the confidential information. In such embodiments, a key download command is necessary to reactivate encrypted data in the disc drive.
- the data storage device includes a storage medium having a plurality of physical memory locations referenced through logical block addresses.
- data from a host computer is received in the data storage device.
- at least a portion of the received data is encrypted within the data storage device if the at least a portion of the received data is destined for storage in at least a subset of a plurality of physical memory locations, which correspond to a predetermined range of logical block addresses.
- the encryption of the at least a portion of the received data is substantially transparent to the host computer and independent of a file to which the data for storage belongs.
- Different techniques some of which are set forth above, can be employed to carry out the steps shown in the flowchart of FIG. 4 while maintaining substantially the same functionality without departing from the scope and spirit of the present invention.
- a flowchart 600 representing a method of retrieving encrypted information, which is stored in a data storage device, is shown.
- a request for data sent by a host computer
- a data storage device receives a request for data from a data storage device.
- the data in encrypted form is decrypted, within the data storage device, before the request for the data is satisfied.
- the data is decrypted only if the current user of the host computer is properly authenticated as described above in connection with FIG. 4 .
- disc drive 100 of the present invention is operational with numerous other general purpose or special purpose computing system environments or configurations.
- Examples of well known computing systems, environments, and/or configurations that may be suitable for use with the invention include, but are not limited to, personal computers, server computers, hand-held or laptop devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Health & Medical Sciences (AREA)
- Bioethics (AREA)
- Health & Medical Sciences (AREA)
- Storage Device Security (AREA)
- Signal Processing For Digital Recording And Reproducing (AREA)
Abstract
Description
- The present invention relates generally to data storage devices. More particularly, the present invention relates to the encryption of data for storage in physical memory locations, which correspond to a range of logical block addresses (LBAs), in a data storage device.
- Mass storage devices are one of many components of modern computers. One type of mass storage device is a fixed disc drive. Such drives are used to store vast amounts of information relating to operating systems, applications, and user data. Some of this information is critical to the functioning of the host system in which the disc drive operates. In addition, the recent dramatic decrease in the cost of disc drives has resulted in them being used in many non-conventional applications, such as, audio/video applications, internet set-top boxes, gaming stations, etc. All these applications require special software to be pre-loaded onto a disc. If application software or other critical information is intentionally or unintentionally overwritten, significant losses could occur. Thus, these applications require sophisticated write protection security features. Further, schemes for prevention of unauthorized access of confidential user data are also required.
- Currently, write protection schemes, and schemes for the prevention of unauthorized access of user data, are primarily implemented in the host computer, with the disc drive having little or no control over the operation of these schemes. Lack of control over such schemes within the disc drive is especially problematic in the case of protection of confidential data because, if the disc drive is stolen or removed from the original host computer, the confidential user data is no longer protected.
- Embodiments of the present invention provide solutions to these and other problems, and offer other advantages over the prior art.
- The present invention relates to a system for encryption of confidential user data that is implemented within a data storage device (such as a disc drive) and is substantially transparent to a host computer, thereby addressing the above-mentioned problem.
- In accordance with one embodiment of the invention, a method of encrypting information in a data storage device that includes a storage medium having a plurality of physical memory locations referenced through logical block addresses is provided. The method includes receiving, in the data storage device, data from a host computer. At least a portion of the received data is encrypted, within the data storage device, if the at least a portion of the received data is destined for storage in at least a subset of the plurality of physical memory locations, which correspond to a predetermined range of logical block addresses. The encryption of the at least a portion of the received data is substantially transparent to the host computer and independent of a file to which the at least a portion of the data belongs.
- The present invention can also be implemented as a data storage device which tangibly embodies a program of instructions executable by a controller of the data storage device to perform the above encryption method.
- These and various other features as well as advantages, which characterize the present invention, will be apparent upon reading the following detailed description and review of the associated drawings.
-
FIG. 1 is an isometric view of a disc drive in which embodiments of the present invention are useful. -
FIG. 2 is a diagrammatic view of a surface of a disc employed in the disc drive ofFIG. 1 . -
FIG. 3 is a block diagram showing a disc drive of the present invention coupled to a host computer. -
FIG. 4 is a flowchart of an example user authentication procedure in accordance with an embodiment of the present invention. -
FIG. 5 is a flowchart of a method embodiment of the present invention. -
FIG. 6 is a flowchart representing a method of retrieving encrypted information, which is stored in a data storage device. - Referring no to
FIG. 1 , an isometric view of adisc drive 100 in which embodiments of the present invention are useful is shown. The same reference numerals are used in the various figures to represent the same or similar elements.Disc drive 100 includes a housing with abase 102 and a top cover (not shown).Disc drive 100 further includes adisc pack 106, which is mounted on a spindle motor 132 (shown inFIG. 3 ) by adisc clamp 108.Disc pack 106 includes a plurality of individual discs, which are mounted for co-rotation aboutcentral axis 109. In some embodiments, instead of utilizing a disc pack, asingle disc 106 is employed. Each disc surface has an associateddisc head slider 110 which is mounted todisc drive 100 for communication with the disc surface. Surfaces ofdisc 106 are usually divided into zones, with each zone including multiple adjacent tracks. In the example shown inFIG. 1 ,sliders 110 are supported bysuspensions 112 which are in turn attached to track accessingarms 114 of anactuator 116. The actuator shown inFIG. 1 is of the type known as a rotary moving coil actuator and includes a voice coil motor (VCM), shown generally at 118.Voice coil motor 118 rotatesactuator 116 with its attachedheads 110 about apivot shaft 120 to positionheads 110 over a desired data track along anarcuate path 122 between a discinner diameter 124 and a discouter diameter 126.Voice coil motor 118 is driven by servo electronics, which is included in control circuitry (or controller) 130, based on signals generated byheads 110 and a host computer 300 (shown inFIG. 3 ). - Referring now to
FIG. 2 , adisc surface 200 of a typical disc (such as a disc ofdisc pack 106 ofFIG. 1 ) is shown. Each disc surface includes a plurality of radially concentric tracks to aid in location and readback of data. Each track (such as 202) is further broken down into a plurality of sectors (or physical memory locations), which further aid in location of a particular unit of information. InFIG. 2 ,portion 204 represents a single sector. These sectors are addressed using a linear addressing scheme called logical block addressing (LBA). For example, in a 540 Meg drive, LBA 0 corresponds to sector 1 (the first sector) of head 0 (the first head), cylinder or track 0 (the first cylinder or track), and successively proceeds along to the last physical sector on the drive which would be LBA 1,065,456. As used herein, logical block addressing represents any linear addressing scheme. - As mentioned above,
disc drive 100 is a component of a computer and is utilized to store vast amounts of information relating to operating systems, applications, and user data. As indicated earlier, current schemes for the prevention of unauthorized access of user data are primarily implemented in the host computer, with the disc drive having little or no control over the operation of these schemes. - The present invention is described below in connection with
FIG. 3 which is a block diagram showingdisc drive 100 of the present invention coupled to ahost computer 300. In general, the present invention addresses earlier-mentioned problems with the prior art by providing a system for encryption of confidential user data that is implemented withindisc drive 100 and is substantially transparent to hostcomputer 300. For a better understanding of the data encryption system of the present invention, an environment in which disc drive 100 of the present invention is useful is first described below. Thereafter, details regarding data encryption withindisc drive 100 in accordance with the present invention are provided. - In
FIG. 3 ,disc drive 100 is coupled to hostcomputer 300, which is an exemplary general-purpose computing device. Components ofcomputer 300 may include aprocessing unit 310, asystem memory 320, and asystem bus 311 that couples various system components including the system memory to theprocessing unit 310.System bus 311 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus, and a local bus using any of a variety of bus architectures. - A user may enter commands and information into
computer 300 through input devices such as akeyboard 342 and apointing device 341, such as a mouse, trackball or touch pad. These and other input devices are often connected to theprocessing unit 310 through auser input interface 340 that is coupled to the system bus. Amonitor 371 or other type of display device is also connected tosystem bus 311 via an interface, such as avideo interface 370.Computer 300 may operate in a networked environment using logical connections to one or more remote computers, such as aremote computer 360 on whichremote application programs 365 reside. The logical connections depicted inFIG. 3 include a local area network (LAN) 351 and a wide area network (WAN) 353, but may also include other networks. When used in a LAN networking environment,computer 300 is connected toLAN 351 through a network interface oradapter 350. When used in a WAN networking environment,computer 300 typically includes amodem 352 or other means for establishing communications overWAN 353, such as the Internet. - As mentioned above,
computer 300 includessystem memory 320 that is coupled toprocessing unit 310 viasystem bus 311.System memory 320 includes computer storage media in the form of volatile and/or nonvolatile memory such as read only memory (ROM) 321 and random access memory (RAM) 322. A basic input/output system 323 (BIOS), containing the basic routines that help to transfer information between elements withincomputer 300, such as during start-up, is typically stored inROM 321.RAM 322 typically contains data and/or program modules that are immediately accessible to and/or presently being operated on by processingunit 310. By way of example,FIG. 3 illustratesoperating system 324,application programs 325,other program modules 326, andprogram data 327. - As can be seen in
FIG. 3 ,disc drive 100 is coupled tocomputer 300 via host-disc interface 330.Computer 300 transfers data to and reads data fromdisc drive 100 via host-disc interface 330. Host-disc interface 330 may be any type of data exchange interface for coupling a disc drive to a host computer, such as SCSI (Small Computer System Interface), UDMA (Ultra Direct Memory Access), ATA (Advance Technology Attachment), or other standards as are known in the industry or are developed in the future. - In
disc drive 100, data is received from, or provided to,host computer 300 with the help ofcontroller 130, which also implements the data encryption scheme of the present invention. In general,controller 130 carries out its functions by executing instructions contained ininstruction memory 133. -
Disc drive 100 provides storage of computer readable instructions, data structures, program modules and other data forcomputer 300. InFIG. 3 , for example,disc drive 100 is illustrated as storingoperating system 134,application programs 135, other program modules 136, andprogram data 137. Note that these components can either be the same as or different fromoperating system 324,application programs 325,other program modules 326, andprogram data 327.Operating system 134,application programs 135, other program modules 136, andprogram data 137 are given different numbers here to illustrate that, at a minimum, they are different copies. -
Operating system 134,application programs 135, other program modules 136, andprogram data 137 are stored as files, with each file being stored over a cluster of sectors (or physical memory locations) referenced through LBAs. It should be noted that the organization and structure of files is controlled by the host computer with the help of the operating system. In general, a disc drive controller (such as 130) operates independently of the operating system and is therefore unaware of any LBA-file relationships. In other words, if the host computer (such as 300) sends data corresponding to a file to the disc drive (such as 100), the information reaches the disc controller (such as 130) as data to be stored in an LBA range. In response to receiving the data storage information, the controller (such as 130), with the help ofhead 110, simply stores the data in physical memory locations that correspond to the specified contiguous LBA range. - In accordance with one embodiment of the present invention, program instructions for LBA range encryption, decryption and other corresponding functions, which
controller 130 is capable of executing, are stored ininstruction memory 133. Also, an encryption range table that can store at least one predetermined range of LBAs, that correspond to at least a subset (less than all) of the plurality of physical memory locations, is included in non-volatile memory (on a disc surface, for example). Table 1 below is an example of such an encryption range table.TABLE 1 Encryption and User Decryption Authentication Starting LBA Ending LBA Information Information 10 15 . . . . . . . . . . . . . . . . . . - As mentioned above, in response to receiving the data storage information, the controller (such as 130) stores the data in physical memory locations that correspond to the specified LBA range. However, in accordance with the present invention, prior to storing the data in the corresponding physical memory locations,
controller 130 determines whether or not the specified LBA range at least partially overlaps any predetermined LBA range(s) stored in the encryption range table. Data corresponding to any of the overlapping LBAs is encrypted bycontroller 130 prior to storage in the corresponding physical memory locations. For example, if a specified LBA range in a write command sent by the host computer is 10-20 and a predetermined LBA range in the encryption range table is 10-15 (starting LBA=10 and ending LBA=15), then data corresponding to LBAs 10-15 is encrypted prior to storage in the physical memory locations corresponding to LBAs 10-15. Data corresponding to LBAs 16-20 is not encrypted. Similarly, if data has to be read from locations physical memory locations corresponding to LBAs 10-20, the encrypted data in physical memory locations corresponding to LBAs 10-15 is decrypted bycontroller 130 before it is transferred tohost computer 300 along with data corresponding to LBAs 16-20. Thus, the present invention provides a substantially host-independent and file-independent encryption scheme, which overcomes the earlier mentioned problems associated with the prior art encryption schemes. It should be noted that, usually, LBA ranges are assigned to coincide with disc partitions and therefore files are either completely encrypted or completely unencrypted. Files may not be split between partitions. - The encryption table(s) (such as Table 1) is created at the time of disc manufacture. Records are added to the encryption table and/or modified after the disc drive (such as 100) is installed in the host computer (such as 300). Additions, deletions and updates of records in the encryption table(s) can be carried out by utilizing any suitable commands that are compatible with host-disc interface protocols, for example.
- In some embodiments of the present invention, a user authentication process is carried out to determine whether or not encryption functions for any predetermined range(s) of LBAs are enabled for a current user of the host computer (such as 300). User authentication in connection with the encryption scheme is preferably carried out at the time the user logs in to the host computer (such as 300).
FIG. 4 is aflowchart 400 of an example user authentication procedure in accordance with an embodiment of the present invention. In accordance with this procedure, a user log-in process begins atstep 402. Atstep 404, the user is asked to enter identification information (username and password, for example). Atstep 406, the user identification information is verified. Atstep 408, decryption is enabled (encrypted data in the disc drive is decrypted for the user to access) if the user identification information is found to be valid. In some embodiments of the present invention, the user identification information includes a decryption key. In other embodiments, entry of the user identification information results in the host computer (such as 300) selecting an appropriate encryption/decryption key that is used to enable decryption. User identification information may be stored in, or tied (joined) to, the encryption range table. In some embodiments, the user authentication procedure is primarily implemented in the operating system. In other embodiments, the user authentication procedure is primarily implemented in BIOS or in a BIOS extension. It should be noted that no operating system changes are required when the user authentication is implemented in the BIOS or BIOS extension. In some embodiments, the user authentication scheme employs security tokens, biometric scanners, etc., which enhance the security of authentication beyond more basic pass phrases. - As mentioned above, contents of the encryption table can be modified (records can be added, deleted and/or updated) by utilizing commands that are compatible with host-disc interface protocols. In embodiments of the present invention, a user authorization process is carried out to determine a level of access 20 (no access, query only, or query and update) that a current user of the host computer (such as 300) has to the encryption range table(s). The user authorization process may be carried out in conjunction with the user authentication process using techniques similar to those described above. User authorization information may be stored in a hidden area of the disc drive and may be loaded into the host computer (such as 300) during the authorization process.
- It should be noted that, in accordance with the present invention, encryption capabilities may differ for different models of disc drives. In different embodiments of the present invention, different encryption standards, such as SHA-1 (Secure Hash Standard) based encryption methods, DES (Data Encryption Standard), AES (Advanced Encryption Standard), etc., may be utilized. The encryption keys and other information from the encryption range table are not normally accessible to the host computer. Further, authentication and encryption key management is performed in
disc controller 130. In some embodiments, encryption keys associated with records in the encryption table(s) may each be derived from a secret master key. Different ciphers (algorithms used to encrypt data) having different capabilities may be utilized in different embodiments of the present invention. Also different lengths of encryption keys (for example, 64, 128, 192 or 256 bit keys) may be utilized or specified in different embodiments. In some embodiments, for protection of very sensitive data (for example, sensitive data in a laptop being transported) data encryption keys may be exported from the disc drive and destroyed in the disc drive. When the encryption keys are destroyed, no disc inspection can reveal the keys. Here, an attacker needs to steal both the drive and the keys to access the confidential information. In such embodiments, a key download command is necessary to reactivate encrypted data in the disc drive. - Referring now to
FIG. 5 , aflowchart 500 representing a method of encrypting information in a data storage device in accordance with an illustrative embodiment of the present invention is shown. The data storage device includes a storage medium having a plurality of physical memory locations referenced through logical block addresses. Atstep 502, data from a host computer is received in the data storage device. Atstep 504, at least a portion of the received data is encrypted within the data storage device if the at least a portion of the received data is destined for storage in at least a subset of a plurality of physical memory locations, which correspond to a predetermined range of logical block addresses. The encryption of the at least a portion of the received data is substantially transparent to the host computer and independent of a file to which the data for storage belongs. Different techniques, some of which are set forth above, can be employed to carry out the steps shown in the flowchart ofFIG. 4 while maintaining substantially the same functionality without departing from the scope and spirit of the present invention. - Referring now to
FIG. 6 , aflowchart 600 representing a method of retrieving encrypted information, which is stored in a data storage device, is shown. In this embodiment of the present invention, atstep 602, a request for data, sent by a host computer, is received in a data storage device. Atstep 604, if at least a portion of the requested data is in an encrypted form within the data storage device, the data in encrypted form is decrypted, within the data storage device, before the request for the data is satisfied. Of course, the data is decrypted only if the current user of the host computer is properly authenticated as described above in connection withFIG. 4 . - In addition to being operational with general purpose computer 300 (
FIG. 3 ),disc drive 100 of the present invention is operational with numerous other general purpose or special purpose computing system environments or configurations. Examples of well known computing systems, environments, and/or configurations that may be suitable for use with the invention include, but are not limited to, personal computers, server computers, hand-held or laptop devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like. - It is to be understood that even though numerous characteristics and advantages of various embodiments of the invention have been set forth in the foregoing description, together with details of the structure and function of various embodiments of the invention, this disclosure is illustrative only, and changes may be made in detail, especially in matters of structure and arrangement of parts within the principles of the present invention to the full extent indicated by the broad general meaning of the terms in which the appended claims are expressed. For example, the particular elements may vary depending on the particular application for the data storage system while maintaining substantially the same functionality without departing from the scope and spirit of the present invention. In addition, although the preferred embodiment described herein is directed to a data encryption system for a disc drive data storage system, it will be appreciated by those skilled in the art that the teachings of the present invention can be applied to any data storage system in which host-independent and file-independent data encryption is desired, without departing from the scope and spirit of the present invention. Further, the encryption scheme of the present invention may be implemented in hardware and/or software within the data storage device.
Claims (20)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/086,178 US7360057B2 (en) | 2005-03-22 | 2005-03-22 | Encryption of data in a range of logical block addresses |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/086,178 US7360057B2 (en) | 2005-03-22 | 2005-03-22 | Encryption of data in a range of logical block addresses |
Publications (2)
Publication Number | Publication Date |
---|---|
US20060218412A1 true US20060218412A1 (en) | 2006-09-28 |
US7360057B2 US7360057B2 (en) | 2008-04-15 |
Family
ID=37036585
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/086,178 Expired - Fee Related US7360057B2 (en) | 2005-03-22 | 2005-03-22 | Encryption of data in a range of logical block addresses |
Country Status (1)
Country | Link |
---|---|
US (1) | US7360057B2 (en) |
Cited By (14)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1998270A1 (en) | 2007-05-31 | 2008-12-03 | NTT DoCoMo, Inc. | External storage device |
EP2031591A1 (en) * | 2007-08-31 | 2009-03-04 | Kabushiki Kaisha Toshiba | Recording apparatus, recording method, and server apparatus |
US20100229005A1 (en) * | 2009-03-04 | 2010-09-09 | Apple Inc. | Data whitening for writing and reading data to and from a non-volatile memory |
US20100250958A1 (en) * | 2006-12-28 | 2010-09-30 | Browning James L | Encrypted data management in database management systems |
US8010809B1 (en) * | 2007-06-22 | 2011-08-30 | Qlogic, Corporation | Method and system for securing network data |
US20120005416A1 (en) * | 2010-07-01 | 2012-01-05 | Samsung Electronics Co., Ltd | Data recording method and data recoding device to improve operational reliability of nand flash memory |
US8275996B1 (en) * | 2010-04-12 | 2012-09-25 | Stephen Waller Melvin | Incremental encryption of stored information |
US20120278529A1 (en) * | 2011-04-28 | 2012-11-01 | Seagate Technology Llc | Selective Purge of Confidential Data From a Non-Volatile Memory |
US8429420B1 (en) | 2010-04-12 | 2013-04-23 | Stephen Waller Melvin | Time-based key management for encrypted information |
US8566603B2 (en) | 2010-06-14 | 2013-10-22 | Seagate Technology Llc | Managing security operating modes |
US8812875B1 (en) | 2010-04-12 | 2014-08-19 | Stephen Melvin | Virtual self-destruction of stored information |
US20170124337A1 (en) * | 2015-11-02 | 2017-05-04 | Via Alliance Semiconductor Co., Ltd. | Chipset and host controller with capability of disk encryption |
US20210382968A1 (en) * | 2007-09-27 | 2021-12-09 | Clevx, Llc | Secure access device with multiple authentication mechanisms |
US11797531B2 (en) * | 2020-08-04 | 2023-10-24 | Micron Technology, Inc. | Acceleration of data queries in memory |
Families Citing this family (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20070168284A1 (en) * | 2006-01-10 | 2007-07-19 | International Business Machines Corporation | Management of encrypted storage media |
US20070180210A1 (en) * | 2006-01-31 | 2007-08-02 | Seagate Technology Llc | Storage device for providing flexible protected access for security applications |
DE102012015348A1 (en) * | 2012-08-06 | 2014-02-06 | Giesecke & Devrient Gmbh | Method for writing and reading data on a block-oriented storage medium |
WO2018209217A1 (en) | 2017-05-11 | 2018-11-15 | Antique Books, Inc. | Attached storage device for enhanced data and program protection |
US11487908B2 (en) * | 2019-08-16 | 2022-11-01 | Macronix International Co., Ltd. | Secure memory |
Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4588991A (en) * | 1983-03-07 | 1986-05-13 | Atalla Corporation | File access security method and means |
US5333277A (en) * | 1992-01-10 | 1994-07-26 | Exportech Trading Company | Data buss interface and expansion system |
US6366866B1 (en) * | 1998-01-27 | 2002-04-02 | Sanyo Electric Co., Ltd. | Coordinates detecting apparatus for independently correcting coordinates |
US20020077177A1 (en) * | 1999-04-08 | 2002-06-20 | Scott Elliott | Security system for video game system with hard disk drive and internet access capability |
US6599194B1 (en) * | 1998-09-08 | 2003-07-29 | Darren Smith | Home video game system with hard disk drive and internet access capability |
US20040199779A1 (en) * | 2003-04-01 | 2004-10-07 | Charles Huang | Method with the functions of virtual space and data encryption and invisibility |
US20060195704A1 (en) * | 2005-01-27 | 2006-08-31 | Hewlett-Packard Development Company, L.P. | Disk array encryption element |
Family Cites Families (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH11161552A (en) | 1997-11-28 | 1999-06-18 | Fujitsu Ltd | Data protecting method for reloadable storage medium and storage device applied therewith |
JP4219680B2 (en) | 2000-12-07 | 2009-02-04 | サンディスク コーポレイション | System, method and device for playing recorded audio, video or other content from non-volatile memory cards, compact discs or other media |
-
2005
- 2005-03-22 US US11/086,178 patent/US7360057B2/en not_active Expired - Fee Related
Patent Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4588991A (en) * | 1983-03-07 | 1986-05-13 | Atalla Corporation | File access security method and means |
US5333277A (en) * | 1992-01-10 | 1994-07-26 | Exportech Trading Company | Data buss interface and expansion system |
US6366866B1 (en) * | 1998-01-27 | 2002-04-02 | Sanyo Electric Co., Ltd. | Coordinates detecting apparatus for independently correcting coordinates |
US6599194B1 (en) * | 1998-09-08 | 2003-07-29 | Darren Smith | Home video game system with hard disk drive and internet access capability |
US20030190952A1 (en) * | 1998-09-08 | 2003-10-09 | Darren Smith | Home video game system with hard disk drive and internet access capability |
US20020077177A1 (en) * | 1999-04-08 | 2002-06-20 | Scott Elliott | Security system for video game system with hard disk drive and internet access capability |
US6468160B2 (en) * | 1999-04-08 | 2002-10-22 | Nintendo Of America, Inc. | Security system for video game system with hard disk drive and internet access capability |
US20030032486A1 (en) * | 1999-04-08 | 2003-02-13 | Nintendo Of America Inc. | Security system for video game system with hard disk drive and internet access capability |
US6712704B2 (en) * | 1999-04-08 | 2004-03-30 | Nintendo Of America Inc. | Security system for video game system with hard disk drive and internet access capability |
US20040199779A1 (en) * | 2003-04-01 | 2004-10-07 | Charles Huang | Method with the functions of virtual space and data encryption and invisibility |
US20060195704A1 (en) * | 2005-01-27 | 2006-08-31 | Hewlett-Packard Development Company, L.P. | Disk array encryption element |
Cited By (25)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100250958A1 (en) * | 2006-12-28 | 2010-09-30 | Browning James L | Encrypted data management in database management systems |
US8639948B2 (en) * | 2006-12-28 | 2014-01-28 | Teradata Us, Inc. | Encrypted data management in database management systems |
EP1998270A1 (en) | 2007-05-31 | 2008-12-03 | NTT DoCoMo, Inc. | External storage device |
US8261099B1 (en) | 2007-06-22 | 2012-09-04 | Qlogic, Corporation | Method and system for securing network data |
US8010809B1 (en) * | 2007-06-22 | 2011-08-30 | Qlogic, Corporation | Method and system for securing network data |
US20090060462A1 (en) * | 2007-08-31 | 2009-03-05 | Kabushiki Kaisha Toshiba | Recording apparatus, recording method, and server apparatus |
EP2031591A1 (en) * | 2007-08-31 | 2009-03-04 | Kabushiki Kaisha Toshiba | Recording apparatus, recording method, and server apparatus |
US20210382968A1 (en) * | 2007-09-27 | 2021-12-09 | Clevx, Llc | Secure access device with multiple authentication mechanisms |
US11971967B2 (en) * | 2007-09-27 | 2024-04-30 | Clevx, Llc | Secure access device with multiple authentication mechanisms |
WO2010101598A1 (en) * | 2009-03-04 | 2010-09-10 | Apple Inc. | Data whitening for writing and reading data to and from a non-volatile memory |
US8589700B2 (en) * | 2009-03-04 | 2013-11-19 | Apple Inc. | Data whitening for writing and reading data to and from a non-volatile memory |
US20100229005A1 (en) * | 2009-03-04 | 2010-09-09 | Apple Inc. | Data whitening for writing and reading data to and from a non-volatile memory |
US8918655B2 (en) | 2009-03-04 | 2014-12-23 | Apple Inc. | Data whitening for writing and reading data to and from a non-volatile memory |
US9245155B1 (en) | 2010-04-12 | 2016-01-26 | Stephen Waller Melvin | Virtual self-destruction of stored information |
US8275996B1 (en) * | 2010-04-12 | 2012-09-25 | Stephen Waller Melvin | Incremental encryption of stored information |
US8429420B1 (en) | 2010-04-12 | 2013-04-23 | Stephen Waller Melvin | Time-based key management for encrypted information |
US8732482B1 (en) * | 2010-04-12 | 2014-05-20 | Stephen W. Melvin | Incremental encryption of stored information |
US8812875B1 (en) | 2010-04-12 | 2014-08-19 | Stephen Melvin | Virtual self-destruction of stored information |
US8566603B2 (en) | 2010-06-14 | 2013-10-22 | Seagate Technology Llc | Managing security operating modes |
US20120005416A1 (en) * | 2010-07-01 | 2012-01-05 | Samsung Electronics Co., Ltd | Data recording method and data recoding device to improve operational reliability of nand flash memory |
US9015401B2 (en) * | 2011-04-28 | 2015-04-21 | Seagate Technology Llc | Selective purge of confidential data from a non-volatile memory |
US20120278529A1 (en) * | 2011-04-28 | 2012-11-01 | Seagate Technology Llc | Selective Purge of Confidential Data From a Non-Volatile Memory |
US20170124337A1 (en) * | 2015-11-02 | 2017-05-04 | Via Alliance Semiconductor Co., Ltd. | Chipset and host controller with capability of disk encryption |
US10073988B2 (en) * | 2015-11-02 | 2018-09-11 | Via Alliance Semiconductor Co., Ltd. | Chipset and host controller with capability of disk encryption |
US11797531B2 (en) * | 2020-08-04 | 2023-10-24 | Micron Technology, Inc. | Acceleration of data queries in memory |
Also Published As
Publication number | Publication date |
---|---|
US7360057B2 (en) | 2008-04-15 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7360057B2 (en) | Encryption of data in a range of logical block addresses | |
US9767322B2 (en) | Data transcription in a data storage device | |
US20070180210A1 (en) | Storage device for providing flexible protected access for security applications | |
US8694800B2 (en) | Apparatus and method for securing data on a portable storage device | |
US7003674B1 (en) | Disk drive employing a disk with a pristine area for storing encrypted data accessible only by trusted devices or clients to facilitate secure network communications | |
US7343493B2 (en) | Encrypted file system using TCPA | |
US9959583B2 (en) | Secure content distribution system | |
US8438652B2 (en) | Restricted erase and unlock of data storage devices | |
US20040172538A1 (en) | Information processing with data storage | |
US8146167B2 (en) | Use management method for peripheral device, electronic system and component device thereof | |
US20080270796A1 (en) | System and method for providing program information, and recording medium used therefor | |
JP2003067256A (en) | Data protection method | |
US8843768B2 (en) | Security-enabled storage controller | |
GB2330682A (en) | Password access to an encrypted drive | |
JP2004510367A (en) | Protection by data chunk address as encryption key | |
JP2007272476A (en) | Information storage device | |
JP5489201B2 (en) | Secure direct platter access | |
JP4084971B2 (en) | Data protection apparatus, data protection method and program used in electronic data exchange system | |
KR20010043582A (en) | Copy-protection on a storage medium by randomizing locations and keys upon write access | |
JP2005505853A (en) | Apparatus and method for reading or writing user data | |
US9251382B2 (en) | Mapping encrypted and decrypted data via key management system | |
JP2001154919A (en) | Method for hiding information inside information storage medium, ciphering method, ciphering system and information storage medium | |
JP3698693B2 (en) | Access control apparatus and computer program thereof | |
JP2010171806A (en) | Storage device and data falsification preventing method of storage device | |
JPH05233460A (en) | File protection system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: SEAGATE TECHNOLOGY LLC, CALIFORNIA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:HARS, LASZLO;THIBADEAU, ROBERT H.;REEL/FRAME:016403/0064;SIGNING DATES FROM 20050315 TO 20050317 |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
AS | Assignment |
Owner name: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT Free format text: SECURITY AGREEMENT;ASSIGNORS:MAXTOR CORPORATION;SEAGATE TECHNOLOGY LLC;SEAGATE TECHNOLOGY INTERNATIONAL;REEL/FRAME:022757/0017 Effective date: 20090507 Owner name: WELLS FARGO BANK, NATIONAL ASSOCIATION, AS COLLATE Free format text: SECURITY AGREEMENT;ASSIGNORS:MAXTOR CORPORATION;SEAGATE TECHNOLOGY LLC;SEAGATE TECHNOLOGY INTERNATIONAL;REEL/FRAME:022757/0017 Effective date: 20090507 |
|
AS | Assignment |
Owner name: SEAGATE TECHNOLOGY HDD HOLDINGS, CALIFORNIA Free format text: RELEASE;ASSIGNOR:JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT;REEL/FRAME:025662/0001 Effective date: 20110114 Owner name: MAXTOR CORPORATION, CALIFORNIA Free format text: RELEASE;ASSIGNOR:JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT;REEL/FRAME:025662/0001 Effective date: 20110114 Owner name: SEAGATE TECHNOLOGY LLC, CALIFORNIA Free format text: RELEASE;ASSIGNOR:JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT;REEL/FRAME:025662/0001 Effective date: 20110114 Owner name: SEAGATE TECHNOLOGY INTERNATIONAL, CALIFORNIA Free format text: RELEASE;ASSIGNOR:JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT;REEL/FRAME:025662/0001 Effective date: 20110114 |
|
AS | Assignment |
Owner name: THE BANK OF NOVA SCOTIA, AS ADMINISTRATIVE AGENT, Free format text: SECURITY AGREEMENT;ASSIGNOR:SEAGATE TECHNOLOGY LLC;REEL/FRAME:026010/0350 Effective date: 20110118 |
|
FPAY | Fee payment |
Year of fee payment: 4 |
|
AS | Assignment |
Owner name: SEAGATE TECHNOLOGY INTERNATIONAL, CAYMAN ISLANDS Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS;ASSIGNOR:WELLS FARGO BANK, NATIONAL ASSOCIATION, AS COLLATERAL AGENT AND SECOND PRIORITY REPRESENTATIVE;REEL/FRAME:030833/0001 Effective date: 20130312 Owner name: SEAGATE TECHNOLOGY US HOLDINGS, INC., CALIFORNIA Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS;ASSIGNOR:WELLS FARGO BANK, NATIONAL ASSOCIATION, AS COLLATERAL AGENT AND SECOND PRIORITY REPRESENTATIVE;REEL/FRAME:030833/0001 Effective date: 20130312 Owner name: EVAULT INC. (F/K/A I365 INC.), CALIFORNIA Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS;ASSIGNOR:WELLS FARGO BANK, NATIONAL ASSOCIATION, AS COLLATERAL AGENT AND SECOND PRIORITY REPRESENTATIVE;REEL/FRAME:030833/0001 Effective date: 20130312 Owner name: SEAGATE TECHNOLOGY LLC, CALIFORNIA Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS;ASSIGNOR:WELLS FARGO BANK, NATIONAL ASSOCIATION, AS COLLATERAL AGENT AND SECOND PRIORITY REPRESENTATIVE;REEL/FRAME:030833/0001 Effective date: 20130312 |
|
FPAY | Fee payment |
Year of fee payment: 8 |
|
FEPP | Fee payment procedure |
Free format text: MAINTENANCE FEE REMINDER MAILED (ORIGINAL EVENT CODE: REM.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
LAPS | Lapse for failure to pay maintenance fees |
Free format text: PATENT EXPIRED FOR FAILURE TO PAY MAINTENANCE FEES (ORIGINAL EVENT CODE: EXP.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
STCH | Information on status: patent discontinuation |
Free format text: PATENT EXPIRED DUE TO NONPAYMENT OF MAINTENANCE FEES UNDER 37 CFR 1.362 |
|
FP | Expired due to failure to pay maintenance fee |
Effective date: 20200415 |